This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft File: 83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json) Hash identifier: Jb+LgusnS6jmA8JkgJ/scKAWvajYZ3qY0k3kusuaEio= Subject key identifier: 29:F5:E0:50:A9:FD:AD:A8:06:47:9E:D5:8B:3E:6F:EF:7E:BE:29:39 Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47 Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47 Certificate serial: 019AF12DE37D0870DAF573EF9169E4FBDB6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft Manifest number: 0A9C Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: FbOvHJ8khQ7Uzg7rcUSe20vpRn1UaskG9ul226GhZaY=) 2: kDhp1dHjDBAXX9BsUPItX2dtNTc.roa (hash: PynDqUC0SP3COf4tmeohMx6MacUGS0U4TVEP+3iExHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e3:7d:08:70:da:f5:73:ef:91:69:e4:fb:db:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=29f5e050a9fdada806479ed58b3e6fef7ebe2939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:30:ac:8a:ca:2b:cc:51:b4:b4:bd:70:68:49: e0:fc:09:9c:51:f7:b0:45:68:f7:01:5d:31:66:36: 79:dd:b0:59:f4:00:df:bf:02:62:83:57:5f:e9:aa: 58:4e:9a:ce:a9:af:d8:84:f7:26:bd:d5:1e:fc:57: 01:0f:8d:22:65:73:77:81:44:ff:32:ee:f1:fc:08: ef:ce:9e:72:f9:fe:96:8d:6a:e5:5e:49:8a:82:95: cd:f3:f3:45:3c:eb:09:e1:cc:f8:30:ec:26:5e:51: 1a:d8:0f:a5:c1:d9:0f:6d:bf:63:b9:b1:58:14:1e: c1:bd:ef:ad:a2:67:03:9e:58:d1:46:f9:e8:a2:ef: cf:6e:17:e8:bb:ab:e5:e8:34:4d:6c:26:cb:f3:f6: 5b:76:09:d5:ce:b6:60:37:9c:58:73:4c:ec:9a:cf: 7e:60:fc:b9:2f:6d:23:48:93:5e:bc:77:3e:4f:34: 8b:c7:cb:9e:4f:7b:63:ed:d7:44:87:fd:27:7a:03: e3:d2:63:9d:d4:a6:aa:a1:3a:90:8f:4d:b3:88:e0: c9:a3:5a:4f:49:14:65:61:b5:8d:9b:24:96:c5:2e: 0e:67:ee:b2:06:07:20:64:98:86:1e:53:33:f4:ad: cf:14:76:89:80:35:18:68:2b:b1:a6:e3:c3:47:cd: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:E0:50:A9:FD:AD:A8:06:47:9E:D5:8B:3E:6F:EF:7E:BE:29:39 X509v3 Authority Key Identifier: keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b5:71:a9:fb:a8:0c:e0:0a:41:29:20:af:8c:82:d3:9a:65: 4d:96:34:ae:dc:82:a6:61:39:2e:2e:58:f9:a2:02:84:90:8b: 8d:b3:76:93:1a:c1:7a:1d:b4:da:b7:58:fd:08:fb:2d:2b:7b: a6:d3:79:ab:83:3f:ac:5b:6f:3f:06:cc:6c:55:dd:c5:4c:ec: 47:0a:d5:50:a4:05:2f:4f:13:68:42:95:56:8e:a9:63:d1:4f: 73:47:03:c1:6d:27:2a:64:2e:43:4b:94:96:92:f1:65:b7:50: ed:ea:66:07:02:93:fe:bc:e6:37:a0:c5:c4:64:e2:20:25:9a: 6d:90:4c:9f:27:30:e1:16:01:3d:28:13:be:c0:b5:20:d9:3d: f2:08:3f:c1:ef:f5:53:8b:2b:f8:7e:07:de:25:79:31:af:28: 1f:72:2a:26:8e:4b:95:a3:a9:b4:59:d1:3d:7f:c9:dd:f9:21: c3:a1:c8:34:27:94:0f:80:fa:ba:26:48:32:9e:7d:8f:84:66: a2:fa:a3:98:1e:e6:b9:95:2d:0a:21:c5:b2:7b:ee:3f:d0:68: b4:e2:08:2e:20:1a:ca:e2:e5:eb:8f:2d:d0:48:8c:f2:05:e8: 51:b4:85:ab:4c:79:11:4d:c5:ce:d4:fc:1b:19:14:e6:67:1e: 1c:95:ec:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeN9CHDa9XPvkWnk+9tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzUyYzEwZjFiMGQwN2I1ZjQ4ZTU3OWRmZDE0ZTM3Mjcx M2ZiNDcwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EygyOWY1ZTA1MGE5ZmRhZGE4MDY0NzllZDU4YjNlNmZlZjdlYmUyOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zCsisorzFG0tL1waEng/AmcUfew RWj3AV0xZjZ53bBZ9ADfvwJig1df6apYTprOqa/YhPcmvdUe/FcBD40iZXN3gUT/ Mu7x/Ajvzp5y+f6WjWrlXkmKgpXN8/NFPOsJ4cz4MOwmXlEa2A+lwdkPbb9jubFY FB7Bve+tomcDnljRRvnoou/Pbhfou6vl6DRNbCbL8/ZbdgnVzrZgN5xYc0zsms9+ YPy5L20jSJNevHc+TzSLx8ueT3tj7ddEh/0negPj0mOd1KaqoTqQj02ziODJo1pP SRRlYbWNmySWxS4OZ+6yBgcgZJiGHlMz9K3PFHaJgDUYaCuxpuPDR82ulwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCn14FCp/a2oBkee1Ys+b+9+vik5MB8GA1UdIwQY MBaAFPN1LBDxsNB7X0jled/RTjcnE/tHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmMyYWYtNGY2ZC00NWJkLWFhMTAt ZTg3MDJlYTU5MDE2LzEvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmMyYWYtNGY2ZC00NWJkLWFhMTAtZTg3MDJlYTU5MDE2 LzEvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrVxqfuo DOAKQSkgr4yC05plTZY0rtyCpmE5Li5Y+aIChJCLjbN2kxrBeh202rdY/Qj7LSt7 ptN5q4M/rFtvPwbMbFXdxUzsRwrVUKQFL08TaEKVVo6pY9FPc0cDwW0nKmQuQ0uU lpLxZbdQ7epmBwKT/rzmN6DFxGTiICWabZBMnycw4RYBPSgTvsC1INk98gg/we/1 U4sr+H4H3iV5Ma8oH3IqJo5LlaOptFnRPX/J3fkhw6HINCeUD4D6uiZIMp59j4Rm ovqjmB7muZUtCiHFsnvuP9BotOIILiAayuLl648t0EiM8gXoUbSFq0x5EU3FztT8 GxkU5mceHJXsgw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:01 2025 by rpki-client